There's a difference. With auto-generated root certs you can't just steal one private key, sign your malware with it and push it to all users of the original software.